CVE-2017-1000061

Name of the Vulnerable Software and Affected Versions xmlsec versions 1.2.23 and earlier

Description The issue is related to the incorrect restriction of XML links to external objects in the xmlsec crypt library. This can allow a remote attacker to impact the confidentiality and availability of protected information. The vulnerability may be exploited when parsing crafted input documents, potentially resulting in information disclosure or denial of service.

Recommendations For xmlsec versions 1.2.23 and earlier, update to a version later than 1.2.23 to resolve the issue. At the moment, there is no information about other versions that may contain a fix for this issue.